On April 14, 2016, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR), entered into a $750,000 settlement with a North Carolina orthopaedic clinic arising from the clinic’s disclosure of x-ray films and related protected health information of 17,300 patients to an entity that was engaged by the clinic to